Sr Application Security Engineer

Henry Schein•TX Remote, USA, TX

1d•Remote

About The Position

The Sr Application Security Engineer is responsible for implementing and maintaining the application security program across research, development, quality assurance, support, and IT systems. This is a high-level, conceptual, and hands-on role requiring broad security experience, application development experience, and secure coding knowledge. The position is remote within the United States, with up to 10% travel as needed. Candidates must be authorized to work in the United States without current or future employer-sponsored visa support.

Requirements

At least 5 years of relevant Information Security and/or Software Engineering experience.
Familiarity with AI/LLM-specific security risks, such as OWASP Top 10 for LLM Applications, prompt injection, model poisoning, and data exfiltration; experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices.
Knowledge of secure application programming, coding lifecycles, and design, including the ability to implement code from technical specifications.
Solid understanding of security principles, best practices, architectures, tools, and processes, as well as working knowledge of multiple current operating systems and hosting environments.
Knowledge of software and network architecture, standards, authentication protocol building blocks, and methods.
Ability to conduct threat assessments, assess risk, and build risk-based security processes that work within various development methodologies.
Ability to communicate security objectives to a variety of audiences.
Working knowledge of reverse engineering techniques and tools.
Solid knowledge of data storage formats, tools, and languages, and familiarity with the programming languages used in the products being secured.
Authorization to work in the United States without current or future employer sponsorship.

Nice To Haves

Bachelor’s degree in Computer Science or Information Security.
One or more relevant industry certifications, such as CISSP, CEH, PNPT, OSWE, GWAPT, OSED, and/or OSCP.

Responsibilities

Advise and participate in the design of secure products and architectures.
Perform architecture security reviews, security-focused code reviews, and security testing.
Work with engineering and product teams to design and implement security-related systems and functionality, including writing secure code as needed and verifying threat models, risk, and security posture.
Monitor software usage and perform forensics to verify that software meets required security standards.
Monitor developments in web and client application security, provide direction on security trends, and anticipate emerging standards and best practices.
Communicate technical concepts to senior management through presentations.
Attend meetings necessary for seamless product delivery throughout the Software Development Life Cycle.
Use AI/ML tools to enhance security testing, threat modeling, and code review workflows.